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Ref # 


Hits 


Search Query 


DBs 


Default 
Operator 


Plurals 


Time Stamp 


L3 


2 


"6971028".pn. 


US-PGPUB; 
USPAT EPO: 
JPO; 

DERWENT; 
I BMTDB 


OR 


ON 


2008/11/05 
10:25 


SI 


125 


(intrusion near5 detect$5) 
and ((sort$5 or filter$5) 
near5 attack) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT 
I BM TDB 


OR 


ON 


2007/03/19 
08:43 


S2 


13 


S1 and ((general and 
specific) near5 attack) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/03/19 
07:38 


S3 


3 


S2 and analyz$5 and filter 
$5 and (generat$5 near5 
alert) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT 
I BM_TDB 


OR 


ON 


2007/03/19 
08:05 


S4 


2 


S2 and analyz$5 and 
(generat$5 near5 alert) 
and firewall 


US-PGPUB; 
USPAT EPO: 
JPO; 

DERWENT; 
I BM_TDB 


OR 


ON 


2007/03/19 
08:05 


S5 


26 


S1 and analyz$5 and 
(generat$5 near5 alert) 
and firewall 


US-PGPUB; 
USPAT; EPO; 
JPO: 

DERWENT; 
I BM TDB 


OR 


ON 


2007/03/19 
08:08 


S6 


8 


S5 and (signature near5 
database) 


US-PGPUB: 
USPAT; EPO; 
JPO; 

DERWENT; 
IBM TDB 


OR 


ON 


2007/11/16 
14:20 


S7 


7 


S6 and ((add$5 or stor$5) 
near5 signature) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/03/19 
08:35 


S3 


19 


S5 not S7 


US-PGPUB; 
USPAT; EPO; 
JPO: 

DERWENT; 
I BM TDB 


OR 


ON 


2007/03/19 
08:35 
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S9 


5 


S5 and ((log$5 near5 
GVGnt) with databasG) 


US-PGPUB; 
i icdat- con- 

JPO; 

DERWENT 
1 BMTDB 


OR 


ON 


2007/03/19 


S10 


0 


"SYSTEM AND METHOD 
OF DEFINING THE 
SECURITY 

VULNERABI LI TIES OF A 
COMPUTER SYSTEM" 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT 
1 BMTDB 


OR 


ON 


2007/03/19 
08:42 


S11 


21 


(intrusion near5 detect$5) 
and ((sort$5 f i Iter $5 
ananlyz$5) near5 (attack 
vulnerabilit$3 compromi 
$3)) and weight 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
1 BMTDB 


OR 


ON 


2007/03/19 
08:44 


S12 


2 


S1 1 and ((log event) 
near5 database) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
1 BMTDB 


OR 


ON 


2007/03/19 
08:45 


S13 


2 


S1 1 and (signature near5 
database) 


US-PGPUB 
USPAT; EPO; 
JPO; 

DERWENT; 
IBM_TDB 


OR 


ON 


2007/03/19 
08:45 


SI 4 


2 


S13 not S12 


US-PGPUB; 

1 IODAT- CCTl- 

UorA 1 , brU, 

JPO; 

DERWENT 
IBM_TDB 


OR 


ON 


2007/03/19 
08:48 


Si 5 


2 


"20040098623" 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
1 BMTDB 


OR 


ON 


2007/03/19 
08:48 


S16 


52 


(intrusion near4 detect$5) 
and ((detect$5 and analyz 
$5) near5 attack) and 
(generat$5 near6 alert) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
1 BMTDB 


OR 


ON 


2007/03/21 


S17 


15 


S1 6 and rate and 
frequency 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
1 BMTDB 


OR 


ON 


2007/03/21 
1 2:24 


S18 


7 


S16 and ((rate frequency) 
near5 attack) and log$5 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
IBM TDB 


OR 


ON 


2007/03/21 
12:00 



ti', Cl/Doci 
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S19 


8 


726/23. eels, and (intrusion 
near5 detect$5) and 
(analyz$5 near5 attack) 
and (generat$5 near5 
alarm) 


US-PGPUB; 
USPAT; EPO; 
JPO: 

DERWENT 
I BMTDB 


OR 


ON 


2007/03/21 
12:08 


S20 


1 


726/25. eels, and (intrusion 
near5 detect$5) and 
(analyz$5 near5 attack) 
and (generat$5 near5 
alarm) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/03/21 
1 2:20 


S21 


0 


((intrusion near5 detect 
$5) and (analyz$5 near5 
attack) and (generat$5 
near5 alarm)). dm. and 
726/23, 25. CCls. 


US-PGPUB; 
USPAT 


OR 


ON 


2007/03/21 
12:21 


S22 


0 


((intrusion near5 detect 
$5) and (analyz$5 near5 
attack) and (generat$5 
near5 alarm)). dm. 


US-PGPUB; 
USPAT 


OR 


ON 


2007/03/21 
12:21 


S23 


83 


(intrusion near4 detect$5) 
and ((detect$5 and analyz 
$5) near5 (compromize 
attack vulnerability)) and 
(generat$5 near6 (warn$5 
or alert)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM_TDB 


OR 


ON 


2007/03/21 
12:23 


§24 


9 


S23 and ((rate frequency) 
near5 (attack vulnerability 
compromiz)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM_TDB 


OR 


ON 


2007/03/21 
12:25 


S25 


5 


(intrusion near5 detection) 
and ((traffic and log and 
event) near5 analyzer) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/04/02 
07:46 


S26 


10 


(intrusion near5 detection) 
and ((log and event) 
near5 analyzer) 


US-PGPUB 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/04/02 
07:48 


S27 


5 


S26 not S25 


US-PGPUB; 
UorA 1 , bHJ, 

JPO; 

DERWENT 
1 BMTDB 


OR 


ON 


2007/04/02 


S28 


4 


(intrusion near5 detection) 
and ((analyz$5 near5 
event) with (generat$5 
near5 alert)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
IBM TDB 


OR 


ON 


2007/04/02 
07:58 



fill Cl/Doci 
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S29 


4 


S28 not S27 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT 
I BMTDB 


OR 


ON 


2007/04/02 
07:58 


S30 


1 


((determin$5 test$5) 
near5 vulnerabilit$5) and 
((analyz$5 near5 event) 
with (generat$5 near5 
alert)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/04/02 
08:00 


S31 


588 


(compar$5 near5 (events 
attacks)) and (generat$5 
near6 alert) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/04/02 
09:01 


§32 


0 


S31 and (determin$5 
near5 charactersitics) and 
((first and second) near6 
(host client)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/04/02 
08:04 


S33 


4 


S31 and (determin$5 
near5 (fingerprint character 
$5 signature)) and ((first 
and second) near6 (host 
client)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM_TDB 


OR 


ON 


2007/04/02 
08:08 


S34 


8 


S31 and (compar$5 near5 
(fingerprint character$5 
signature)) and ((first and 
second) near6 (host 
client)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM_TDB 


OR 


ON 


2007/04/02 
08:08 


S35 


4 


S34 not S33 


US-PGPUB; 
i lODAT- con- 

JPO; 

DERWENT; 
1 BMTDB 


OR 


ON 


2007/04/02 
08:10 


§36 


222 


(alert$5 near5 (new near5 
(events attacks))) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
1 BM_TDB 


OR 


ON 


2007/04/02 
08:1 1 


S37 


0 


((alert$5 near5 (new 
near5 (events attacks))) 
with (second near5 (client 
host "network device"))) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
1 BMTDB 


OR 


ON 


2007/04/02 
08:12 


S38 


0 


((alert$5 near5 (new 
near5 (events attacks))) 
with ((second other) near5 
(client host "network 
device"))) 


US-PGPUB; 
USPAT EPO: 
JPO; 

DERWENT; 
1 BMTDB 


OR 


ON 


2007/04/02 
08:12 
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S39 


21 


alert$ 5 nes new- 
near5 (events attacks))) 
and ((second other) near5 
(client host "network 
device"))) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT 
I BMTDB 


OR 


ON 


2007/04/02 
08:56 


S40 


4 


S39 and intrusion 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/04/02 
08:58 


S41 


11 


(compar$5 near5 (events 
attacks)) and ((generat$5 
near6 alert) with (new 
near5 (events attacks))) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/04/02 
09:04 


S42 


1 


(compar$5 near5 (events 
attacks)) and ((generat$5 
near6 (alert warning)) 
with (new near5 (attack 
vulnerabilit$5 compromi 
$5))) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT 
I BM TDB 


OR 


ON 


2007/04/02 
09:04 


S43 


8 


(detect$5 near5 (events 
attack vulnerabilit$5 
comprom$5)) and 
((generat$5 near6 (alert 
warning)) with (new near5 
(attack vulnerabilit$5 
compromi$5))) 


US-PGPUB; 
USPAT EPO: 
JPO: 

DERWENT; 
I BM_TDB 


OR 


ON 


2007/04/02 
10:47 


S44 


7 


S43 not S42 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM_TDB 


OR 


ON 


2007/04/02 
09:10 


S45 


5 


((first and second) near6 
(warning alert)) and S43 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/04/02 
09:13 


S46 


59 


hill. in. and intrusion 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/04/02 
09:13 


S47 


1 


" 20030084344". PN. 


US-PGPUB 


OR 


ON 


2007/04/02 
09:40 


S48 


701 


(generat$5 near5 (alert 
warning)) and (detect$5 
near5 intru$6) 


US-PGPUB 


OR 


ON 


2007/04/02 
09:41 


S49 


94 


S48 and (event near5 
database) 


US-PGPUB 


OR 


ON 


2007/04/02 
11:01 


S50 


0 


S49 and (((test$5 check 
$5) near8 devices) with 
vulnerabilit$5) 


US-PGPUB 


OR 


ON 


2007/04/02 
10:04 
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S51 


334 


726/23-26. eels, and (detect 
$5 near5 intrusion) 


US-PGPUB 


OR 


ON 


2007/08/17 
11:06 


S52 


3 


S51 and S43 


US-PGPUB 


OR 


ON 


2007/04/02 
10:06 


S53 


76 


S51 and (analyzS5 near6 
(vulnerabilit$4 attack 
compromi$5)) 


US-PGPUB 


OR 


ON 


2007/04/02 
10:07 


S54 


3 


S53 and (((generat$5 issu 
$5) near6 alert) with (new 
near5 (attack vulnerabilit 
$5 event compromi$4))) 


US-PGPUB 


OR 


ON 


2007/04/02 
10:08 


S55 


8 


((detect$5 check$5) near5 
(events attack vulnerabilit 
$5 comprom$5)) and 
((generat$5 near6 (alert 
warning)) with (new near5 
(attack vulnerabilit$5 
compromi$5))) 


US-PGPUB; 
USPAT; EPO; 
JPO: 

DERWENT; 
I BM_TDB 


OR 


ON 


2007/04/02 
10:48 


S56 


7 


S55 and ((frequency rate) 
near8 (attack vulnerabilit 
$4 compromiz$5)) 


US-PGPUB; 

I I CD AT- PDTV 

JPO; 

DERWENT 
I BM_TDB 


OR 


ON 


2007/04/02 


S57 


26 


S49 and ((first and 
second) near5 network) 


US-PGPUB 


OR 


ON 


2007/04/03 
12 51 


S58 


0 


"6671812".pn. 


US-PGPUB 


OR 


ON 


2007/04/03 
12:52 


§59 


2 


"6671812".pn. 


US-PGPUB; 

1 ICDAT- EDTV 

UorMI , trvj, 

JPO; 

DERWENT; 
IBM_TDB 


OR 


ON 


2007/04/03 


SSO 


2 


"6775780". pn. 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
1 BMTDB 


OR 


ON 


2007/04/03 
13:02 


S61 


2 


"7165174". pn. 


US-PGPUB: 
USPAT; EPO; 
JPO; 

DERWENT; 
1 BMTDB 


OR 


ON 


2007/04/03 
1 3:30 


S62 


2 


"6772346". pn. 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
1 BMTDB 


OR 


ON 


2007/04/03 
13:30 


S63 


2 


"20040098623" 


US-PGPUB; 
USPAT: EPO' 
JPO; 

DERWENT 
IBM TDB 


OR 


ON 


2007/08/09 
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S64 


2 


"20030188194" 


US-PGPUB; 
USPAT EPO; 
JPO: 

DERWENT; 
I BMTDB 


OR 


ON 


2007/08/09 
15:47 


S65 


3 


"20020178383" 


US-PGPUB; 
USPAT EPO: 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/08/09 
16:03 


S66 


10 


(detect$5 with ((general 
and specific) near5 
attack)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/08/09 
16:11 


S67 


0 


(detect$5 with ((general 
and client-specific) near5 
(attack vulnerability 
comprom$5))) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/08/09 
16:12 


S68 


3 


(detect$5 with ((general 
and ((client node device) 
near5 specific)) with 
(attack vulnerability 
comprom$5))) 


US-PGPUB; 
USPAT EPO: 
JPO; 

DERWENT; 
I BM_TDB 


OR 


ON 


2007/08/09 
16:15 


S69 


2 


S68 not S66 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM_TDB 


OR 


ON 


2007/68769 
16:14 


S70 


35 


((general and ((client node 
device) near5 specific)) 
with (attack vulnerabilit$2 
comprom$5)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT 
I BM TDB 


OR 


ON 


2007/08/09 
16:15 


S71 


33 


S70 not S69 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/08/13 
09:55 


S72 


237 


(ids and ((detect$5 and 
analyz$5 and log$5) near5 
attack)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/08/13 
09:57 


S73 


6 


S72 and (filter with alert) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT 
IBM TDB 


OR 


ON 


2007/08/13 
10:01 
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S74 


20 


S72 and ((classif$5 
catGgoriz$5) n6ar6 attack) 


US-PGPUB; 
i icdat- con- 

JPO; 

DERWENT 
I BMTDB 


OR 


ON 


2007/08/13 


S75 


13 


S74 and (plurality near5 
network) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/08/13 
10:06 


S76 


0 


S74 and (plurality near4 
firewall) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/08/13 
10:06 


S77 


1 


S74 and ((multiple 
plurality) near4 firewall) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/08/13 
10:19 


S78 


2 


"20030046583" 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM_TDB 


OR 


ON 


2007/08/13 
10:20 


S79 


2 


"20030226038" 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT 
I BM_TDB 


OR 


ON 


2007/08/13 
10:52 


S80 


85305 


(plurality near3 (network 
analyzer firewall)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM_TDB 


OR 


ON 


2007/08/13 
12:13 


S81 


0 


(plurality near3 (network 
analyzer firewall)). elm. 
and "edge detection 
network". elm. 


US-PGPUB: 
USPAT: EPO: 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/08/13 


S82 


0 


(plurality near3 (network 
analyzer firewall)). elm. 
and "edge detection 
network" 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/08/13 
1 2: 14 


S83 


0 


(plurality near3 (analyzer 
firewall)). elm. and "edge 
detection network" 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
IBM TDB 


OR 


ON 


2007/08/13 
12:14 
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S84 


0 


((plurality multiple) near3 
(analyzer firewall)). elm. 
and "edge detection 
network" 


US-PGPUB; 
USPAT; EPO; 
JPO: 

DERWENT 
I BMTDB 


OR 


ON 


2007/08/13 
12:15 


S85 


0 


((plurality multiple) near3 
(analyzer firewall)) and 
"edge detection network" 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/08/13 
12:15 


S86 


2 


I DS and "edge detection 
network" 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/08/13 
12:16 


S87 


3367 


I DS and (edge NEAR5 
(network database)) 


US-PGPUB 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/08/13 
12:16 


S88 


70 


I DS and (edge NEAR5 
(network database)) and 
((detect$5 analyz$5 log$5) 
near5 attack) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM_TDB 


OR 


ON 


2007/08/13 
12:17 


S89 


6 


S88 and ((filter$5 classif$5 
categor$5) near5 attack) 
and (generat$5 near5 
alert) 


US-PGPUB; 
UorA 1 , brU, 

JPO; 

DERWENT; 
IBM_TDB 


OR 


ON 


2007/08/13 


S90 


4 


S89 not S86 


US-PGPUB; 

UorA 1 , brU, 

JPO; 

DERWENT; 
1 BMTDB 


OR 


ON 


2007/08/13 


S91 


2 


S88 and ((classif$5 and log 
$5) near5 attack) 


US-PGPUB 
USPAT; EPO; 
JPO; 

DERWENT; 
1 BMTDB 


OR 


ON 


2007/08/13 
12:53 


S92 


2 


S91 not S86 


US-PGPUB; 
UorA 1 , bHJ, 

JPO; 

DERWENT 
1 BMTDB 


OR 


ON 


2007/08/13 


S93 


0 


S88 and (((personalized 
client-specific) and 
general) near5 attack) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
IBM TDB 


OR 


ON 


2007/08/13 
12:27 
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S94 


3 


S88 and (((personalized 
client-specific specific) and 
general) near5 attack) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT 
I BMTDB 


OR 


ON 


2007/08/13 
1 2:43 


S95 


0 


S88 and (((personalized 
client-specific specific host- 
based) and (general and 
"network based" network- 
based)) near5 (attack 
intrusion)) 


US-PGPUB; 
USPAT EPO: 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/08/13 
12:45 


S96 


3 


S88 and (((personalized 
client-specific specific host- 
based) and (general and 
"network based" network- 
based)) with (attack 
intrusion)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT 
I BM TDB 


OR 


ON 


2007/08/13 
12:52 


S97 


149 


(((personalized client- 
specific specific host- 
based) and (general and 
"network based" network- 
based)) with (attack 
intrusion)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
IBM TDB 


OR 


ON 


2007/08/13 
12:52 


§98 


9 


S97 and ((classif$5 and log 
$5) near5 (attack 
intrusion)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT 
I BM_TDB 


OR 


ON 


2007/08/13 
1 2:57 


S99 


83 


S97 and ((network-based 
and host-based) near5 
(attack intrusion)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM_TDB 


OR 


ON 


2007/08/13 
13:03 


si' 06 


3 


S99 and ((plurality 
multiple) near5 firewalls) 


US-PGPUB; 
UorA 1 , brU, 

JPO; 

DERWENT; 
1 BMTDB 


OR 


ON 


2007/08/13 


S101 


126 


S97 and (((network-based 
network) and (host client 
host-based)) near5 (attack 
intrusion)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
1 BMTDB 


OR 


ON 


2007/08/13 
13:20 


S102 


0 


S101 and ((worm and 
virus) near5 (network 
near4 (attack intrusion))) 


US-PGPUB; 
UorA 1 , bHJ, 

JPO; 

DERWENT 
1 BMTDB 


OR 


ON 


2007/08/13 
1 3:04 


S103 


1 


S101 and ((worm and 
virus) with (network near4 
(attack intrusion))) 


US-PGPUB; 
USPAT' EPO' 
JPO; 

DERWENT; 
IBM TDB 


OR 


ON 


2007/08/13 
1 3:05 
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S104 


22 


S101 and (targeted near4 
(attack intrusion)) 


US-PGPUB; 
USPAT EPO: 
JPO; 

DERWENT 
I BMTDB 


OR 


ON 


2007/08/13 
13:05 


S1 05 


11 


S101 and (((network- 
based network) and (host 
client host-based)) near5 
(polic$3 rules)) 


US-PGPUB; 
USPAT EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/08/13 
13:32 


S106 


0 


S101 and (((network- 
based network) and (host 
client host-based)) near5 
(detect$5 with (polic$3 
rules))) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/08/13 
13:24 


S107 


21 


(plurality multiple) with 
(log near3 analyzer) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/08/13 
13:32 


S108 


0 


S107 and (detect$5 with 
((network and host) near5 
(intrusion attack))) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM_TDB 


OR 


ON 


2007/08/13 
13:33 


S109 


2 


S107 and (detect$5 near5 
(intrusion attack)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM_TDB 


OR 


ON 


2007/08/13 
13:34 


S1 10 


1 


S1 07 and (analyz$5 near5 
(intrusion attack)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT 
I BM TDB 


OR 


ON 


2007/08/13 
13:35 


S1 11 


1 


S107 and (analyz$5 near5 
(intrusion attack 
vulnerability)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/08/13 
13:35 


S112 


1 


S1 07 and (analyz$5 near5 
(intrusion attack 
vulnerabilit$3)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/08/13 
15:51 


S113 


37 


((plurality multiple couple) 
near4 analyzer) and 
(analyz$5 near5 (intrusion 
attack vulnerabilit$3)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT 
IBM TDB 


OR 


ON 


2007/08/13 
15:52 
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S1 14 


4 


S113 and ((plurality 
multipl©) with firewall) 


US-PGPUB; 
UorA 1 , bKJ, 

JPO; 

DERWENT 
1 BMTDB 


OR 


ON 


2007/08/13 


S1 15 


2 


S113 and ((plurality 
multiple) near5 firewall) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
1 BMTDB 


OR 


ON 


2007/08/13 
16:27 


§116 


2 


S113 and ((plurality 
multiple) near5 (firewall 
"log analyzer")) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
1 BMTDB 


OR 


ON 


2007/08/13 
16:10 


S1 17 


69 


((analyz$5 log$3) near5 
(intrusion attack 
vulnerabilit$3))and 
((plurality multiple) near5 
firewall) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
1 BMTDB 


OR 


ON 


2007/08/13 
16:12 


S118 


69 


((analyz$5 log$3) near5 
(intrusion attack 
vulnerabilit$3)) and 
((plurality multiple) near5 
firewall) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
IBM_TDB 


OR 


ON 


2007/08/13 
16:27 


S1 19 


10 


Sl18and ((classif$5 
categoriz$5 group$4) 
near5 (attack 
vulnerability)) 


US-PGPUB; 
UorA 1 , brU, 

JPO: 

DERWENT; 
IBM_TDB 


OR 


ON 


2007/08/14 


si 20 


2 


S113 and ((plurality 
multiple) near5 (firewall 
proxy)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT 
1 BMTDB 


OR 


ON 


2007/08/13 
16:27 


S121 


84 


((analyz$5 log$3) near5 
(intrusion attack 
vulnerabilit$3)) and 
((plurality multiple) near5 
(firewall proxy)) 


US-PGPUB; 

1 ICDAT- cnn. 

UorAI , brU, 

JPO; 

DERWENT; 
1 BMTDB 


OR 


ON 


2007/08/13 


S1 22 


2 


"20040098623" 


US-PGPUB; 

1 ICDAT- I~rY~V 

UorA 1 , bKJ, 

JPO; 

DERWENT; 
1 BMTDB 


OR 


ON 


2007/08/13 
1 6:28 


S123 


5 


((analyz$5 log$3) near5 
(intrusion attack 
vulnerabilit$3)) and 
((plurality multiple) near5 
(firewall proxy)) and (edge 
near3 network) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT 
1 BMTDB 


OR 


ON 


2007/08/13 
16:29 
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S124 


5 


S1 23 not S1 22 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BMTDB 


OR 


ON 


2007/08/13 
16:31 


S125 


0 


( ( classifS5 categonz$5 
group$4) near5 (attack 
vulnerability)) same 
((random general) and 
((user client device) near3 
specific)) 


US-PGPUB; 
USPAT EPO: 
JPO; 

DERWENT 
I BM TDB 


OR 


ON 


2007/08/14 
12:53 


S126 


52 


((attack vulnerability)) 
with ((random general) 
and ((user client device) 
near3 specific)) 


US-PGPUB; 
UorAI , brU, 

JPO; 

DERWENT; 
1 BMTDB 


OR 


ON 


2007/08/14 
1 2:53 


S1 27 


1246421 


IDS (intrusion near3 
detection) 


US-PGPUB 
USPAT; EPO; 
JPO; 

DERWENT 
1 BMTDB 


OR 


ON 


2007/08/14 
13:42 


S128 


207 


S127 and (((random 
general) and (((client 
machine device) near3 
specific) client-specific 
device-specific targeted)) 
near6 (attack 
vulnerability)) 


US-PGPUB; 
USPAT; EPO; 
JPO: 

DERWENT; 
IBM_TDB 


OR 


ON 


2007/08/14 
14:16 


SI 29 


193 


S1 28 and (analyz$5 near5 
(attack vulnerability)) 


US-PGPUB; 

1 IQPAT- FPTV 

JPO; 

DERWENT 
IBM_TDB 


OR 


ON 


2007/08/14 


S130 


185 


S128 and ((analyz$5 and 
log$5) near5 (attack 
vulnerability)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
IBM TDB 


OR 


ON 


2007/08/14 
13:48 


S131 


40 


S130 and (severity 
importance) 


US-PGPUB; 

1 ICDAT- cnn. 

UorAI , brU, 

JPO; 

DERWENT; 
1 BMTDB 


OR 


ON 


2007/08/14 


S132 


145 


S130 not S131 


US-PGPUB; 
UorA 1 , bHJ, 

JPO; 

DERWENT; 
1 BMTDB 


OR 


ON 


2007/08/14 
1 3:59 


S133 


767698 


S132 (impact) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
IBM TDB 


OR 


ON 


2007/08/14 
1 3:59 
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S134 


139 


S132 and (impact) 


US-PGPUB; 
i icdat- con- 

JPO; 

DERWENT 
1 BMTDB 


OR 


ON 


2007/08/14 


S135 


143 


S132 and (classif$5 
categoriz$5 group$5) with 
(attack vulnerability) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT 
1 BMTDB 


OR 


ON 


2007/08/14 
14:02 


S136 


0 


S1 35 and (generat$5 
near5 (alarm warning)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
1 BMTDB 


OR 


ON 


2007/08/14 
14:02 


S137 


2 


S135 and (alarm warning) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
1 BMTDB 


OR 


ON 


2007/08/14 
14:02 


SI 38 


2 


S135 and firewall 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
IBM_TDB 


OR 


ON 


2007/08/14 
14:02 


SI 39 


143 


S132 and ((classif$5 
categoriz$5 group$5) with 
(attack vulnerability)) 


US-PGPUB; 

1 IODAT- CCTl- 

UorA 1 , brU, 

JPO; 

DERWENT 
IBM_TDB 


OR 


ON 


2007/08/14 


SI 40 


142 


S1 39 and analyzer 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
IBM_TDB 


OR 


ON 


2007/08/14 
14:03 


S141 


143 


S139 and ((analyzS5 log 
$5) near5 (attack 
vulnerability)) 


US-PGPUB: 
USPAT: EPO: 
JPO; 

DERWENT; 
1 BMTDB 


OR 


ON 


2007/08/14 
14:03 


S142 


2 


S141 and (multiple 
plurality couple) near8 
network 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
1 BMTDB 


OR 


ON 


2007/08/14 
14:03 


S143 


1 


S142 not S138 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT 
IBM TDB 


OR 


ON 


2007/08/14 
14:04 
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SI 44 


1 


S142 not S137 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT 
I BMTDB 


OR 


ON 


2007/08/14 
14:05 


S145 


3 


S141 and (access near7 
(rules policies)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/08/14 
14:06 


S146 


1 


S141 and (compar$5 
near7 (attack 
vulnerability)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/08/14 
14:08 


S147 


140 


S141 and ((check$5 
contrast$5) near7 (attack 
vulnerability)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/08/14 
14:14 


SI 48 


0 


726/23,25.ccls. and S147 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM_TDB 


OR 


ON 


2007/08/14 
14:14 


SI 49 


0 


726/23-25. eels, and S147 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM_TDB 


OR 


ON 


2007/08/14 
14:50 


S150 


23 


726/22- 25. eels, and 
(((random general) and 
(((client machine device) 
near3 specific) client- 
specific device-specific 
targeted)) near6 (attack 
vulnerability)) 


US-PGPUB; 
USPAT EPO: 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/08/14 
14:48 


S151 


18 


S150 and (rate frequency) 


US-PGPUB 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/08/14 
14:38 


S152 


7 


S150 and ((rate 
frequency) near6 (attack 
vulnerability compromi$3)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/08/14 
14:44 


S153 


2 


"20040098623" 


US-PGPUB; 
USPAT EPO' 
JPO; 

DERWENT; 
IBM TDB 


OR 


ON 


2007/08/14 
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S1 54 


4 


S150 and (match$5 with 
attack) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT 
I BMTDB 


OR 


ON 


2007/08/14 
14:49 


S1 55 


351 


726/23 25.ccls. and 
((compar$5 match$5 check 
$5) near7 signature) 


US-PGPUB; 
UorA I , bKJ, 

JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/08/14 
14:50 


S156 


3 


726/23-25.ccls. and 
(((compar$5 match$5 
check$5) near7 signature) 
same ((general ranom) 
near4 attack)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/08/14 
14:52 


S1 57 


2 


726/23-25.ccls. and 
(((compar$5 match$5 
check$5) near7 signature) 
same (((general ranom) 
and (targeted specific)) 
near4 attack)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM_TDB 


OR 


ON 


2007/08/14 
14:52 


SI 58 


2 


726/23-25.ccls. and 
(((compar$5 match$5 
check$5) near7 signature) 
same (((general ranom) 
and (targeted specific)) 
near4 attack)) 


US-PGPUB; 
USPAT EPO: 
JPO; 

DERWENT; 
I BM_TDB 


OR 


ON 


2007/08/14 
14:52 


SI 59 


2 


726/23-25.ccls. and 
(((compar$5 match$5 
check$5) near7 
(characterisitc signature)) 
same (((general ranom) 
and (targeted specific)) 
near4 attack)) 


US-PGPUB; 
USPAT; EPO; 
JPO: 

DERWENT; 
I BM_TDB 


OR 


ON 


2007/08/14 
14:54 


SI 60 


2 


726/23-25.ccls. and 
(((compar$5 match$5 
check$5) near7 
(characterisitc signature)) 
same (((general ranom) 
and (targeted specific)) 
near4 (vulnerability 
attack))) and ((DoS 
"denial of service") and 
(worm virus)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/08/14 
14:59 


S161 


10976 


((classif$5 categor$4 group 
$5) with (attack 
vulnerability compromiz 
$5)) 


US-PGPUB; 

1 ICDAT- cnn. 

UorA 1 , bKJ, 

JPO; 

DERWENT 
1 BMTDB 


OR 


ON 


2007/08/14 


S162 


0 


((classif$5 categor$4 group 
$5) near7 (attack 
vulnerabilit$3 compromiz 
$5)) with (logged near5 
(attack vulnerabilit$3 
compromiz$5)) 


US-PGPUB; 
USPAT EPO: 
JPO; 

DERWENT 
1 BMTDB 


OR 


ON 


2007/08/14 
15:02 
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S163 


12 


((classif$5 categor$4 group 
$5) near7 (attack 
vulnerabilit$3 compromiz 
$5)) with ((stored 
recorded logged) near5 
(attack vulnerabilit$3 
compromiz$5)) 


US-PGPUB; 
USPAT EPO: 
JPO: 

DERWENT; 
I BMTDB 


OR 


ON 


2007/08/14 
15:11 


S164 


20 


((classif$5 categor$4 group 
$5 defin$5) near7 (attack 
vulnerabilit$3 compromiz 
$5)) with ((stored 
recorded logged) near5 
(attack vulnerabilit$3 
compromiz$5)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/08/14 
15:11 


S1 65 


8 


S164 not S163 


US-PGPUB; 

1 IODAT- CDA. 

UorAI , brU, 

JPO; 

DERWENT; 
1 BMTDB 


OR 


ON 


2007/08/14 
1 5:59 


SI 66 


1 


sherkat.xa. and firewall 
and pinhole 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
IBM_TDB 


OR 


ON 


2007/08/14 
15:59 


§167 


170366 


((plurality multiple couple) 
near5 (networks subnets)) 


US-PGPUB; 
USPAT; EPO; 
JPO: 

DERWENT 
IBM_TDB 


OR 


ON 


2007/08/15 
16:52 


SI 68 


10 


S167 and ((classif$5 
categoriz$5 group$5) 
near5 (attack vulnerabilit 
$4)) with log$4 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
IBM TDB 


OR 


ON 


2007/08/15 
16:57 


S1 69 


6 


S167 and ((classif$5 
categoriz$5 group$5) 
near5 (attack vulnerabilit 
$4)) with (log$4 near5 
(attack vulnerabilit$4)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
1 BMTDB 


OR 


ON 


2007/08/15 
17:03 


S170 


0 


(detect$5 near4 intrusion) 
and (((classif$5 categoriz 
$5 group$5 rank$5) near5 
(attack vulnerabilit$4 
compromiz$5)) same 
((compar$5 check$5) 
near7 ((logged recorded 
database datastore table) 
near5 (attack vulnerabilit 
$4 compromiz$5)))) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
IBM TDB 


OR 


ON 


2007/08/15 
17:07 
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S171 


3 


(((classif$5 categoriz$5 
group$5 rank$5) near5 
(attack vulnerabilit$4 
compromiz$5)) same 
((compar$5 check$5) 
near7 ((logged recorded 
database datastore table) 
near5 (attack vulnerabilit 
$4 compromiz$5)))) 


US-PGPUB; 
USPAT EPO: 
JPO; 

DERWENT 
I BMTDB 


OR 


ON 


2007/08/15 
17:07 


S1 72 


18 


(((classif$5 categoriz$5 
group$5 rank$5) with 
(attack vulnerabilit$4 
compromiz$5)) same 
((compar$5 check$5) with 
[(logged recorded 
database datastore table) 
near5 (attack vulnerabilit 
$4 compromiz$5)))) 


US-PGPUB; 
USPAT EPO: 
JPO; 

DERWENT 
I BM TDB 


OR 


ON 


2007/08/15 
17:31 


S173 


3231 


726/23-27.CCIS. 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT 
IBM TDB 


OR 


ON 


2007/08/15 
17:31 


S1 74 


55 


(((classif$5 categoriz$5 
group$5 rank$5 determin 
$5) with (attack vulnerabilit 
$4 compromiz$5)) same 
((compar$5 check$5) with 
((logged recorded 
database datastore table) 
near5 (attack vulnerabilit 
$4 compromiz$5)))) 


US-PGPUB; 
USPAT EPO: 
JPO; 

DERWENT; 
I BM_TDB 


OR 


ON 


2007/08/15 
17:32 


S175 


25 


S174 and S173 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/08/15 
1 7:42 


SI 76 


30 


S174 not S175 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/08/15 
17:42 


S1 77 


15 


S176 and (I DS intrusion) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT 
I BM TDB 


OR 


ON 


2007/08/16 
11:13 


S1 78 


2 


'5541 995". pn. 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/08/16 
11:13 


S179 


1049 


726/23-27.ccls. and 
((detect$5 near5 
ntrusion) IDS) 


US-PGPUB 


OR 


ON 


2007/08/17 
11:06 
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[S180 


262 


S179 and ((characteriz$5 
group$5 classif$5 determin 
$5 categoriz$5) with 
(attack vulnerabilit$4 
compromiz$4)) 


US-PGPUB 


OR 


ON 


2007/08/17 
1 1 : 07 


S181 


49 


S180 and (("based on" 
according compa$5 check 
$5 test$5) with ((logged 
recorded database 
datastore "data store" 
"data base" table) near7 
(attack vulnerabilit$4 
compromiz$4))) 


US-PGPUB 


OR 


ON 


2007/08/17 
11:10 


S1 82 


50 


S180 and (("based on" 
accord$5 compa$5 check 
$5 test$5) with ((logged 
recorded database 
datastore "data store" 
"data base" table) near7 
(attack vulnerabilit$4 
compromiz$4))) 


US-PGPUB 


OR 


ON 


2007/08/17 
11:35 


SI 83 


22 


S180 and (analyz$5 with 
((logged recorded 
database datastore "data 
store" "data base" table) 
near7 (attack vulnerabilit 
$4 compromiz$4))) 


US-PGPUB 


OR 


ON 


2007/08/17 
11:35 


SI 84 


16 


S183 not S182 


US-PGPUB 


OR 


ON 


2007/08/17 
11:45 






S1 82 and ((random 
general) with (attack 
vulnerabilit$4 compromiz 
$4)) 


ucrrvjruD 






onn7/n«/ 1 7 

dXAll 1 UO/ 1 / 

11:45 


S1 86 


18 


S182 and ((random 
general) near4 (attack 
vulnerabilit$4 compromiz 
$4)) 


US-PGPUB 


OR 


ON 


2007/08/17 
12:38 


SI 87 


0 


"7017186". pn. 


US-PGPUB 


OR 


ON 


2007/08/17 
12:38 


S188 


1 


"10208485" 


US-PGPUB 


OR 


ON 


2007/08/17 
12:39 


S1 89 


1 


"10/208485" 


US-PGPUB 


OR 


ON 


2007/08/17 
12:39 


S190 


1 


"10/208,485" 


US-PGPUB 


OR 


ON 


2007/08/17 
12:39 


S191 


8 


day. in. and intrusion 


US-PGPUB 


OR 


ON 


2007/08/17 
15:36 


S192 


1 


"20060107317" 


US-PGPUB 


OR 


ON 


2007/08/18 
16:34 


S193 


5928 


edge near5 network 


US-PGPUB 


OR 


ON 


2007/08/18 
16:35 
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S1 94 


2060 


S193 and (ids "intrusion 
detection") 


US-PGPUB 


OR 


ON 


2007/08/18 
16:35 


S195 


83 


S194 and (detect$5 near5 
(attack vulnerabilit$4)) 


US-PGPUB 


OR 


ON 


2007/08/18 
16:36 


S1 96 


73 


S195 and ((plurality 
multiple couple different) 
near5 network) 


US-PGPUB 


OR 


ON 


2007/08/18 
16:36 


S1 97 


74 


S195 and ((plurality 
multiple couple different) 
near5 (network firewall 
analyzer detector)) 


US-PGPUB 


OR 


ON 


2007/08/18 
16:37 


S198 


7 


S197 and ("denial of 
service" denial-of-service) 
and (worm virus) 


US-PGPUB 


OR 


ON 


2007/08/18 
16:44 


S1 99 


3 


S197 and ("denial of 
service" denial-of-service) 
and ((attack vulnerabilit 
$4) near5 signature) 


US-PGPUB 


OR 


ON 


2007/08/18 
16:43 


S200 


0 


S199 not S198 


US-PGPUB 


OR 


ON 


2007/08/18 
1b 43 


S201 


19 


S197 and ((database log 
$5 table datastore) with 
(worm virus signature)) 


US-PGPUB 


OR 


ON 


2007/08/18 
16 45 


S202 


16 


S201 not S198 


US-PGPUB 


OR 


ON 


2007/08/18 
17:05 


§203 


6 


intrusion and (network 
near4 (alert warning 
notification)) and ((log$s 
and (group$5 classif$5 
categoriz$5)) near5 
attack) 


US-PGPUB; 
USPAT EPO: 
JPO; 

DERWENT; 
I BM_TDB 


OR 


ON 


2007/11/16 
14:25 


S204 


70 


intrusion and (network 
near4 (alert warning 
notification)) and (log$5 
near5 analyz$5) and 
firewall 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BMTDB 


OR 


ON 


2007/11/16 
14:28 


S205 


9 


S204 and ((group$5 classif 
$5 categoriz$5) near6 
attack) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/11/16 
14:32 


S206 


0 


S204 and ((group$5 classif 
$5 categoriz$5) near6 
attack) and ((first and 
second) near5 analyzer) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT 
I BM TDB 


OR 


ON 


2007/11/16 
14:33 


S207 


1 


S204 and ((group$5 classif 
$5 categoriz$5) near6 
attack) and ((network and 
(client-specific (client 
near2 specific))) near5 
attack) 


US-PGPUB; 
USPAT; EPO; 
JPO' 

DERWENT; 
I BM TDB 


OR 


ON 


2007/11/16 
14:34 
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S208 


2 


S204 and ((group$5 classif 
$5 categoriz$5) with 
(attack vulnerabilit$3 
intrusion)) and ((network 
and ( cl iont-spscif ic (client 
near2 specific))) with 
(attack vulnerabilit$3 
intrusion)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT 
I BM_TDB 


OR 


ON 


2007/11/16 
14:36 


S209 


2 


(alert warning notification) 
and (analyz$5 near5 (log 
$5 database repository 
datastore "data store")) 
and ((group$5 classif$5 
categoriz$5) with (attack 
vulnerabilit$3 intrusion)) 
and ((network and (client- 
specific (client near2 
specific))) with (attack 
vulnerabilit$3 intrusion)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT 
I BMTDB 


OR 


ON 


2007/11/16 
14:50 


S210 


13 


((log$5 record$5) near5 
(attack vulnerabilit$3 
intrusion)) with ((multiple 
"more than one" plurality 
couple) near5 network) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT: 
I BM_TDB 


OR 


ON 


2007/11/16 
14:45 


§211 


1 


((generat$5 creat$5 issu 
$5) near6 (alert warning 
notification)) and (analyz 
$5 near5 (log$5 database 
repository datastore "data 
store")) and ((group$5 
classif$5 categoriz$5) with 
(attack vulnerabilit$3 
intrusion)) and ((network 
and (client-specific (client 
near2 specific))) with 
(attack vulnerabilit$3 
intrusion)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM_TDB 


OR 


ON 


2007/11/16 
14:51 


S212 


122 


((generat$5 creat$5 issu 
$5) near6 (alert warning 
notification)) and ((group 
$5 classif$5 categoriz$5) 
with (attack vulnerabilit$3 
intrusion)) and (((network 
general) and (client- 
specific (client near2 
specific) specific)) with 
(attack vulnerabilit$3 
intrusion)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/11/16 
14:57 


S213 


0 


S212 and (priorotiz$5 
near5 handl$5) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT 
IBM TDB 


OR 


ON 


2007/11/16 
14:58 
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S214 


121 


S212 and (priority 
importance severity level) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BMTDB 


OR 


ON 


2007/11/16 
14:59 


S215 


98 


S212 and ((priority 
importance severity level) 
near5 (attack vulnerabilit 
$4 compromiz$5 
intrusion)) 


US-PGPUB; 

I ICDAX- CDH- 

UorAI , bKJ, 

JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/11/16 
1 5:00 


S216 


17 


S212 and (((priority 
importance severity level) 
near5 (attack vulnerabilit 
$4 compromiz$5 
intrusion)) with ((general 
network) near5 attack)) 


US-PGPUB; 
USPAT EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/11/16 
15:50 


S217 


2 


"71 52242". pn. 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/11/16 
15:51 


S218 


2 


"562551 8".pn. 


US-PGPUB; 
UorAI , brU, 

JPO; 

DERWENT; 
IBM_TDB 


OR 


ON 


2007/11/16 
1 5:52 


S219 


2 


"562581 5".pn. 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT 
IBM_TDB 


OR 


ON 


2007/11/16 
15:54 


S220 


1290 


((network general) and 
(specific client)) near5 
(attack intrusion vulnerabili 
$4) 


_™_ 

USPAT; EPO; 
JPO; 

DERWENT; 
1 BMTDB 


or" 


ON ~" 


2bWfi7l6 
15:56 


S221 


8044 


((network general) and 
(specific client)) near5 
(event incident attack 
intrusion vulnerabili$4) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
1 BMTDB 


OR 


ON 


2007/11/16 
1 5:56 


S222 


4092 


S221 and ((log$5 record 
$5) near5 (attack 
vulnerabilit$3 event 
incident)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT 
1 BMTDB 


OR 


ON 


2007/11/16 
15:58 


S223 


1819 


S222 and (handl$5 near5 
(cittcicK vulnGr3,bilit$5 
event incident)) 


US-PGPUB; 
USPAT' EPO' 
JPO; 

DERWENT 
IBM TDB 


OR 


ON 


2007/11/16 
1 6:04 
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S224 


163 


S222 and (prioritiz$5 
near5 (attack vulnerabilit 
$5 event incident)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT 
1 BMTDB 


OR 


ON 


2007/11/16 
16:12 


S225 


86 


S224 and ((generatS5 creat 
$5 issu$5 send$5) near5 
(alert warning 
notification)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
1 BMTDB 


OR 


ON 


2007/11/16 
16:14 


S226 


33 


S225 and intrusion 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
1 BMTDB 


OR 


ON 


2007/11/16 
16:36 


S227 


16 


S226 and ((group$5 classif 
$5 categoriz$5) near6 
(attack vulnerabilit$3 
incident)) 


US-PGPUB 
USPAT; EPO; 
JPO; 

DERWENT; 
1 BMTDB 


OR 


ON 


2007/11/26 
07:25 


S228 


2 


"20050102530" 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
IBM_TDB 


OR 


ON 


2007/11/26 
08:14 


S229 


1471 


((format$5 convert$5 
transform$5) near6 
request) with (XML 
"extensible markup 
language") 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
IBM_TDB 


OR 


ON 


2007/11/26 
08:27 


S230 


76 


S229 and ((evaluat$5 
analyz$5) near7 (XML 
"extensible markup 
language")) 


US-PGPUB; 
USPAT; EPO; 
JPO: 

DERWENT 
1 BMTDB 


OR 


ON 


2007/11/26 
08:17 


S231 


15 


S229 and ((evaluat$5 
analyz$5) near7 ((XML 
"extensible markup 
language") near3 
request)) 


US-PGPUB 
USPAT; EPO; 
JPO; 

DERWENT; 
1 BMTDB 


OR 


ON 


2007/11/26 
08:18 


S232 


560 


(request$5 near5 access) 
and ((format$5 convert$5 
transform$5) near6 
request) with (XML 
"extensible markup 
language") 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
1 BMTDB 


OR 


ON 


2007/11/26 
08:29 


S233 


0 


(request$5 near5 access) 
and ((((format$5 convert 
$5 transform$5) near6 
request) near10 (XML 

language")) with ((before 
upon when at) near3 
(evaluat$5 analyz$5))) 


US-PGPUB; 
USPAT EPO: 
JPO; 

DERWENT; 
IBM TDB 


OR 


ON 


2007/11/26 
08:30 
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S234 


1 


((((format$5 convert$5 
transform$5) near6 
request) nearlO (XML 
"extensible markup 
language")) with ((before 
upon when at) near3 
(evaluat$5 analyz$5))) 


US-PGPUB; 
USPAT EPO: 
JPO; 

DERWENT; 
I BMTDB 


OR 


ON 


2007/11/26 
08:31 


S235 


7 


((((formatS5 convertS5 
transform$5) near6 
request) nearlO (XML 
"extensible markup 
language")) with ((evaluat 
$5 analyz$5) near5 (xml 
near3 request))) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2007/11/26 
08:33 


S236 


1403 


(((format$5 convert$5 
transform$5 evaluat$5 
analyz$5) near6 request) 
nearlO (XML "extensible 
markup language")) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
IBM TDB 


OR 


ON 


2007/11/26 
08:34 


S237 


3 


S236 and ((compar$5 
evaluat$5 analyz$5) near5 
((xml "extensible markup 
language") near5 rule)) 


US-PGPUB; 

I IODAT- CDA. 

UorA I , brU, 

JPO; 

DERWENT; 
I BM_TDB 


OR 


ON 


2007/11/26 
08:35 


S238 




" 6585778". PN. 


USPAT USOCR 


OR 


ON 


2007/11/26 
08:39 


§239 




" 6569207". PN. 


USPAT USOCR 


OR 


ON 


2007/11/26 
08:45 


S240 




"6519617". PN. 


USPAT; USOCR 


OR 


ON 


2007/11/26 
08 49 


S241 




"71 431 90". PN. 


USPAT; USOCR 


OR 


ON 


2007/11/26 
08:49 


S242 




"6480865". PN. 


USPAT; USOCR 


OR 


ON 


2007/11/26 
09:14 


S243 




" 6446256". PN. 


USPAT; USOCR 


OR 


ON 


2007/11/26 
09:14 


S244 




" 6446256". PN. 


USPAT; USOCR 


OR 


ON 


2007/1 1/26 
09:51 


S245 




"64461 10". PN. 


USPAT; USOCR 


OR 


ON 


2007/11/26 
09 52 


S246 




"6411 974". PN. 


USPAT; USOCR 


OR 


ON 


2007/11/26 
09:53 


S247 




"6289501 ".PN. 


USPAT; USOCR 


OR 


ON 


2007/1 1/26 
09:54 


S248 




" 5956726". PN. 


USPAT; USOCR 


OR 


ON 


2007/11/26 
09:56 


S249 


0 


((conver$5 format$5 
transform$5) near5 (to 
near3 xml)) 


USPAT USOCR 


OR 


ON 


2007/11/26 
09:57 
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S250 


823 


((conver$5 format$5 
transform$5) with ((plain- 
text html) near3 xml)) 


USPAT; USOCR 


OR 


ON 


2007/11/26 
09:59 


S251 


0 


((conver$5 format$5 
transform$5) with ((access 
near3 request) near8 
((plain-text html) near3 
xml))) 


USPAT; USOCR 


OR 


ON 


2007/11/26 
10:00 


S252 


0 


((convertS5 formatS5 
transform$5) near7 
(access near3 request)) 
with (("palin text" plain- 
text html htm) near3 xml) 


USPAT USCGR 


OR 


ON 


2007/11/26 
10:01 


S253 


1 


(((specific and general) 
near4 attack) with alert) 


US-PGPUB 
USPAT; EPO; 
JPO; 

DERWENT; 
I BMTDB 


OR 


ON 


2008/11/04 
14:02 


S254 


0 


(((specific and general) 
near4 attack) with 
warning) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT 
I BM_TDB 


OR 


ON 


2008/11/04 
14:03 


S255 


0 


(((specific and general) 
near4 (attack compromiz 
$5)) with warning) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM_TDB 


OR 


ON 


2008/11/04 
14:03 


S256 


1 


(((specific and general) 
near4 (attack compromiz 
$5)) with (alert warn$5)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM_TDB 


OR 


ON 


2008/11/04 
14:03 


S257 


1 


((((((network client) near3 
(specific targeted)) and 
(general group))) near4 
(attack compromiz$5)) 
with (alert warn$5)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2008/11/04 
14:05 


S258 


6 


((((network client) near3 
(specific targeted aimed)) 
near4 (attack compromiz 
$5)) with (alert warn$5)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2008/11/04 
14:06 


S259 


2 


"6971 028". pn. 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2008/11/04 
14:07 


S260 


3 


"20020178383" 


US-PGPUB; 
USPAT; EPO; 
JPO: 

DERWENT 
IBM TDB 


OR 


ON 


2008/11/04 
14:13 
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S261 


1846 


(test$5 assess$5) with 
(plurality near5 networks) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT 
I BMTDB 


OR 


ON 


2008/11/04 
14:30 


S262 


38 


(test$5 assess$5) with 
(plurality near5 networks) 
and (vulnerabilit$5 near5 
network) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT 
I BM TDB 


OR 


ON 


2008/11/04 
14:31 


S263 


0 


((test$5 assess$5) with 
(plurality near5 networks)) 
and (vulnerabilit$5 near5 
((other another) near4 
network)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT 
I BM TDB 


OR 


ON 


2008/11/04 
14:31 


S264 


0 


((test$5 assess$5) with 
(vulnerabilit$5 near5 
((other another) near4 
network))) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2008/11/04 
14:32 


S265 


0 


((test$5 assess$5 analyz 
$5 check$5) with 
(vulnerabilit$5 near5 
((other another) near4 
network))) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM_TDB 


OR 


ON 


2008/11/04 
14:32 


S266 


0 


((test$5 assess$5 analyz 
$5 check$5) with 
(vulnerabl$5 near5 ((other 
another) near4 network))) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT 
I BM_TDB 


OR 


ON 


2008/11/04 
14:34 


S267 


0 


((test$5 assess$5 analyz 
$5 check$5 determin$5) 
with (vulnerabl$5 near5 
((other another) near4 
network))) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM_TDB 


OR 


ON 


2008/11/04 
14:34 


S268 


0 


((test$5 assess$5 analyz 
$5 check$5 determin$5) 
with (vulnerabl$5 near5 
((other another next) 
near4 (network 
subnetwork domain)))) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2008/11/04 
14:35 


S269 


0 


((test$5 assess$5 analyz 
$5 check$5 determin$5) 
with ((vulnerabl$5 
compromiz$5) n6cir5 
((other another next) 
near4 (network 
subnetwork domain)))) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DFRWFMT- 
UCnvvtjN 1 , 

1 BMTDB 


OR 


ON 


2008/11/04 
14:35 
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S270 


0 


((test$5 assess$5 analyz 
$5 check$5 determin$5) 
with ((vulnerabl$5 
compromiz$5) near5 
((other another next) 
near4 (network 
subnetwork sub-network 
domain)))) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT 
I BMTDB 


OR 


ON 


2008/11/04 
14:35 


S271 


3 


((test$5 assess$5 analyz 
$5 check$5 determin$5) 
with ((vulnerabl$5 
compromiz$5 attack$4) 
near5 ((other another 
next) near4 (network 
subnetwork sub-network 
domain)))) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT 
I BM.TDB 


OR 


ON 


2008/11/04 
14:36 


S272 


12 


((test$5 assess$5 analyz 
$5 check$5 determin$5) 
with ((vulnerabl$5 
compromiz$5 attack$4) 
near5 (localized specific 
targeted aimed))) with 
(alert warning) 


US-PGPUB; 
USPAT; EPO; 
JPO: 

DERWENT; 
I BM_TDB 


OR 


ON 


2008/11/04 
14:39 


S273 


12 


S272 not S271 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
I BM_TDB 


OR 


ON 


2008/11/04 
14:39 


S274 


1 


((test$5 assess$5 analyz 
$5 check$5 determin$5) 
with ((vulnerabl$5 
compromiz$5 attack$4) 
near5 ((localized specific) 
and (distributed 
general)))) with (alert 
warning) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT 
I BM_TDB 


OR 


ON 


2008/11/04 
14:41 


S275 


2 


((test$5 assess$5 analyz 
$5 check$5 determin$5) 
with ((vulnerabl$5 
compromiz$5 attack$4) 
near5 (signature pattern 
routine))) with ((alert 
warning) near5 (domain 
network subnetwork)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
IBM TDB 


OR 


ON 


2008/11/04 
14:44 


S276 


0 


((test$5 assess$5 analyz 
$5 check$5 determin$5) 
with (new with ((vulnerabl 
$5 compromiz$5 attack$4) 
near5 (signature pattern 
routine)))) with ((alert 
warning) near5 (domain 
network subnetwork)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
IBM TDB 


OR 


ON 


2008/11/04 
14:46 
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0 


(((test$5 assess$5 analyz 
$5 check$5 determin$5) 
near5 (domain network 
subnetwork)) with (new 
with ((vulnerabl$5 
compromiz$5 attack$4) 
near5 (signature pattern 
routine)))) with (alert 
warning) 


US-PGPUB; 
USPAT; EPO; 
JPO: 

DERWENT; 
1 BMTDB 


OR 


ON 


2008/11/04 
14:46 


S278 


4 


(((test$5 assess$5 analyz 
$5 check$5 determin$5) 
near5 (domain network 
subnetwork)) with (new 
with ((vulnerabl$5 
compromiz$5 attack$4) 
near5 (signature pattern 
routine)))) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
1 BMTDB 


OR 


ON 


2008/11/04 
14:47 


S279 


0 


(((test$5 assess$5 analyz 
$5 check$5 determin$5) 
near5 (plurality near5 
(domain network 
subnetwork))) with (new 
with ((vulnerabl$5 
compromiz$5 attack$4) 
near5 (signature pattern 
routine)))) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
IBM_TDB 


OR 


ON 


2008/11/04 
14:49 


§280 


0 


((plurality near5 (domain 
network subnetwork)) 
with (new with ((vulnerabl 
$5 compromiz$5 attack$4) 
near5 (signature pattern 
routine)))) 


U&rePUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
IBM_TDB 


OR 


ON 


2008/11/04 
14:50 


§281 


0 


(((plurality multiple) near5 
(domain network 
subnetwork)) with (new 
with ((vulnerabl$5 
compromiz$5 attack$4) 
near5 (signature pattern 
routine)))) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
IBM_TDB 


OR 


ON 


2008/11/04 
14:50 


§282 


0 


(((plurality multiple) near5 
(domain network 
subnetwork)) with (new 
with ((vulnerabl$5 
compromiz$5 attack$4) 
near5 (signature pattern 
fingerprint)))) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
1 BMTDB 


OR 


ON 


2008/11/04 
14:50 


S283 


4 


(((plurality multiple) near5 
(domain network 
subnetwork)) same (new 
with ((vulnerabl$5 
compromiz$5 attack$4) 
near5 (signature pattern 
fingerprint digest)))) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
1 BM TDB ' 


OR 


ON 


2008/11/04 
14:51 
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19 


edge near5 (intrusion 
near2 detection) 


US-PGPUB; 
USPAT EPO: 
JPO; 

DERWENT 
I BMTDB 


OR 


ON 


2008/11/04 
14:56 


S285 


402 


(((plurality multiple) near5 
(domain network 
subnetwork)) same 
(security near5 (assess$5 
check$5 test$5 determin 
$5 evaluat$5))) 


US-PGPUB; 
USPAT EPO: 
JPO; 

DERWENT; 
I BM TDB 


OR 


ON 


2008/11/04 
15:02 


S286 


22 


S285 and ((alert waring) 
with (vulnerability 
compromize attack)) 


US-PGPUB; 
USPAT; EPO; 
JPO; 

DERWENT; 
IBM TDB 


OR 


ON 


2008/11/04 
15:04 
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